$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: zVwtrFlSh56lVx4/gMx6xII4hopbMdrw4WruqMz1hW0= Subject key identifier: E1:16:E6:78:C5:6F:E4:FE:CA:49:4A:6D:24:4B:1B:91:30:51:FC:52 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019A4F2AFDE67F013E69EC661E803677EF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0106 Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Wed 05 Nov 2025 14:00:08 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: OsibgMVgVeYEURWuNVXogMEPh+4j3e9IGQKcGOGc2S4=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2a:fd:e6:7f:01:3e:69:ec:66:1e:80:36:77:ef:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 5 14:00:08 2025 GMT Subject: CN=e116e678c56fe4feca494a6d244b1b913051fc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:a9:e8:cc:92:46:57:50:06:38:54:3f:45: 71:d3:75:49:2a:7f:27:89:c0:74:62:86:d8:9f:47: f8:b8:7b:61:2a:85:6c:e2:94:02:a3:93:a4:19:25: d2:e7:4d:a8:b2:0d:93:8b:c2:4d:86:4b:0c:11:dd: 7f:f2:89:71:92:fa:75:47:32:03:6c:12:d5:9f:ce: 04:44:ca:0a:98:75:37:1f:f9:2c:90:ca:94:67:3a: fb:eb:99:ec:18:39:9b:d8:e6:30:83:e2:22:2f:8c: e8:46:32:ea:25:6e:d3:36:b0:cb:57:e9:ce:22:91: 49:dc:ab:0e:1e:d4:a3:43:5f:66:3f:91:65:bd:ab: 34:54:dc:6d:ab:e3:69:7f:aa:f2:9d:2a:4d:f6:e3: d1:5a:35:dc:63:11:28:ca:8c:68:80:77:72:e3:5c: 69:71:fa:35:eb:5a:6e:bf:5f:6d:d3:4c:2b:02:03: 98:a0:7d:f0:30:a4:0f:96:ce:7a:21:e0:41:a0:75: 4e:24:9f:5e:a7:33:e6:8c:90:23:e2:f7:7b:a1:32: ea:e6:a4:7e:71:83:34:b0:47:3a:d2:2e:03:d0:5d: 12:a9:96:a6:0d:4a:72:6e:47:ed:2b:ee:9d:f7:b4: 3c:fc:8a:25:14:a0:89:34:34:fd:26:f8:3c:a9:00: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:16:E6:78:C5:6F:E4:FE:CA:49:4A:6D:24:4B:1B:91:30:51:FC:52 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:64:ec:ae:d4:f8:77:15:4b:5a:e5:dd:23:a8:65:e6:fc: 27:c4:6f:60:4d:ee:52:00:04:5a:e9:1f:05:76:26:f0:e1:dc: a3:7a:8b:11:e2:4a:1c:ae:1c:32:67:b4:7a:cb:11:4d:47:b8: 84:37:f1:ca:61:e5:d2:9b:e9:23:e2:d8:39:da:3b:75:5c:cb: a3:70:25:7a:90:d0:44:e6:05:7f:4d:4a:28:eb:ca:84:a3:47: 15:5f:d9:f5:e5:c8:84:5c:a1:db:fd:06:5b:b7:f9:a3:38:09: e0:0b:17:37:a8:13:66:ca:34:a1:75:05:60:f6:82:3c:09:d3: 74:c8:2c:cb:37:e8:66:0c:40:68:01:17:8b:d4:47:92:32:b3: 82:78:9b:1a:fc:a7:9d:c5:7a:f0:a2:2e:63:6b:40:08:2d:fb: 98:c5:4c:4f:fa:66:ce:0b:e2:04:dd:e9:c4:a3:cd:9d:41:d7: e9:65:42:32:16:cd:1c:b9:5b:6d:5c:c4:2d:52:6a:5e:9d:d2: f6:72:e7:b1:12:d1:aa:53:11:44:8b:fa:f2:7b:a7:da:fa:bb: bd:57:a0:bd:30:01:6d:15:7d:e2:67:8c:d8:59:3c:a3:20:80: 87:f4:62:85:35:ea:e8:c0:72:0b:3c:d6:30:89:b2:aa:b1:3f: 7d:69:25:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKv3mfwE+aexmHoA2d+9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMTA0MTQwMDA4WhcNMjUxMTA1MTQwMDA4WjAzMTEwLwYDVQQD EyhlMTE2ZTY3OGM1NmZlNGZlY2E0OTRhNmQyNDRiMWI5MTMwNTFmYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T2p6MySRldQBjhUP0Vx03VJKn8n icB0YobYn0f4uHthKoVs4pQCo5OkGSXS502osg2Ti8JNhksMEd1/8olxkvp1RzID bBLVn84ERMoKmHU3H/kskMqUZzr765nsGDmb2OYwg+IiL4zoRjLqJW7TNrDLV+nO IpFJ3KsOHtSjQ19mP5Flvas0VNxtq+Npf6rynSpN9uPRWjXcYxEoyoxogHdy41xp cfo161puv19t00wrAgOYoH3wMKQPls56IeBBoHVOJJ9epzPmjJAj4vd7oTLq5qR+ cYM0sEc60i4D0F0SqZamDUpybkftK+6d97Q8/IolFKCJNDT9Jvg8qQA1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEW5njFb+T+yklKbSRLG5EwUfxSMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLRk7K7U +HcVS1rl3SOoZeb8J8RvYE3uUgAEWukfBXYm8OHco3qLEeJKHK4cMme0essRTUe4 hDfxymHl0pvpI+LYOdo7dVzLo3AlepDQROYFf01KKOvKhKNHFV/Z9eXIhFyh2/0G W7f5ozgJ4AsXN6gTZso0oXUFYPaCPAnTdMgsyzfoZgxAaAEXi9RHkjKzgnibGvyn ncV68KIuY2tACC37mMVMT/pmzgviBN3pxKPNnUHX6WVCMhbNHLlbbVzELVJqXp3S 9nLnsRLRqlMRRIv68nun2vq7vVegvTABbRV94meM2Fk8oyCAh/RihTXq6MByCzzW MImyqrE/fWklkg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:44 2025 by rpki-client